Privacy policy.

1. Who we are

SmilePlus Dental (Pvt.) Limited is a dental clinic incorporated in the Islamic Republic of Pakistan (SECP registration number 0156892), operating from 3rd Floor, Silver Oaks Plaza, F-7 Markaz, Jinnah Super. We are registered with the Pakistan Medical & Dental Council and comply with the Personal Data Protection Act 2023.

2. What we collect

We collect only the personal data required to provide dental care and administer appointments:

• Contact details — name, WhatsApp/phone number, email, home area (not full address unless requested).
• Medical history — allergies, current medication, systemic conditions, relevant dental history. Collected at first visit via a paper form and digitised to our practice management system (Dentrix Cloud).
• Clinical records — x-rays, intra-oral photographs, treatment plans, consent forms, clinical notes. These are retained for 10 years per PM&DC guidelines.
• Financial records — invoices, payments, insurance claim forms. Retained for 7 years per Federal Tax Authority rules.
• Messages — WhatsApp chats with our reception are retained for 2 years.

3. Why we collect it

Your data is used to: book and run appointments, provide clinical care safely, process insurance and panel claims, send appointment reminders (only with your consent), respond to your messages, meet our record-keeping obligations under PM&DC and Federal Tax Authority rules.

We do not use your data for marketing. We do not sell or share your data with advertisers, data brokers, or third-party marketers.

4. Who sees your data

Inside SmilePlus: your treating dentist, the nurse assisting, our reception and billing team. That is it.

Outside SmilePlus, limited data is shared with:

• Your insurer or corporate panel — only what the claim form requires, with your signed consent.
• A referred specialist (e.g. oral surgeon for complex wisdom teeth) — only if you're being referred, only what the specialist needs.
• Our practice management software vendor (Dentrix Cloud) — data is hosted on AWS ap-south-1 (Mumbai). Contractually bound to HIPAA equivalents.
• WhatsApp (Meta Platforms) — messages are end-to-end encrypted; we do not share additional data with Meta.

We will never share your data with law enforcement without a valid court order.

5. Your rights

Under the Personal Data Protection Act 2023 you have the right to:

• Access a copy of all data we hold about you — we'll send it within 14 days.
• Correct anything that's wrong.
• Ask us to delete your data, subject to regulatory retention (clinical records must be kept 10 years by law; after that, we delete on request).
• Withdraw consent for appointment reminders at any time.
• Complain to the Data Protection Authority if you believe we've mishandled your data.

To exercise any of these rights, email hello@smileplusdental.pk or WhatsApp +92 333 844 6200. Dr. Saira Rasheed is our data protection lead.

6. WhatsApp-specific notes

WhatsApp messages between you and SmilePlus are end-to-end encrypted — even we can only read them once delivered. Automated replies (from "Hira") are generated using Google's Gemini model; no message content is used to train the model. Conversations are reviewed internally only for quality assurance, and only by clinical staff.

7. Cookies on this website

This website uses strictly-necessary cookies to keep the site functional. We do not use tracking, advertising, or analytics cookies. If you book via the website form, your submission is logged to our practice management system — not to a third-party form service.

8. Contact

Questions? Email hello@smileplusdental.pk or write to Dr. Saira Rasheed, 3rd Floor, Silver Oaks Plaza, F-7 Markaz, Jinnah Super, Islamabad 44000.